This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json) Hash identifier: uB/44qhUfqBPT4MgQHBriuOdwTfE0HEHlnCgqfuXFgM= Subject key identifier: ED:4B:CF:B4:5A:76:86:D0:57:45:39:58:50:AC:B8:90:20:DE:23:B6 Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30 Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930 Certificate serial: 019B3F48684F7C5CCD5DEA34ADDFA9019E43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft Manifest number: 037A Signing time: Sun 21 Dec 2025 05:01:08 +0000 Manifest this update: Sun 21 Dec 2025 05:01:08 +0000 Manifest next update: Mon 22 Dec 2025 05:01:08 +0000 Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=) 2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: pnAaJIYoCNQEUwD/MT2cbclGA9Voq1NtIPoRdrz4bSg=) 3: J_7nGvX3BZw4FXXIO0TsrEmgd2Y.roa (hash: jqcFlSNVRG3Aj3N9s1+X70XYoSNVkY4OIWxwZDb7oHY=) 4: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:68:4f:7c:5c:cd:5d:ea:34:ad:df:a9:01:9e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930 Validity Not Before: Dec 21 05:01:08 2025 GMT Not After : Dec 22 05:01:08 2025 GMT Subject: CN=ed4bcfb45a7686d05745395850acb89020de23b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:8c:ed:bc:3b:a6:8a:5a:b5:3c:72:08:36: 60:a6:69:0f:5f:7f:e3:fe:b7:78:d6:c7:de:91:e1: 44:55:5b:80:f1:54:95:10:c1:18:01:17:b8:e0:6f: 89:ca:9d:07:91:3d:a8:c8:8c:b2:f5:3b:87:06:61: 1c:b1:4f:73:da:0e:34:8f:ca:ac:7a:d9:51:36:e2: cb:3e:ba:70:ad:d5:b7:6a:40:64:73:02:ca:77:f4: d3:f5:44:e2:c3:2d:94:f0:6c:22:02:3c:a0:f0:fc: 9d:86:9a:d3:0a:f7:a7:23:b7:77:70:a6:f7:8a:17: 6e:1d:01:81:19:8d:0d:aa:67:00:ad:b9:e7:be:3e: 01:5f:d1:e6:a2:81:a0:24:89:13:df:00:93:5d:bf: 1d:c9:ff:4a:ef:c3:db:81:b5:fc:84:6a:01:04:ef: 6f:5b:48:79:dd:f3:d1:71:45:5b:98:d1:e2:3c:12: a3:b6:59:3b:2b:d0:c3:ca:ed:4e:fa:59:47:38:d2: cd:ab:0f:e2:72:3d:f3:31:00:bb:24:a8:9e:50:89: 2a:7f:a4:84:39:30:83:b6:64:77:d6:89:15:38:d4: 0a:f1:d8:84:16:7c:b9:9f:66:15:61:b6:08:33:c2: 15:53:eb:ec:60:65:aa:d1:fd:ad:67:a5:67:51:3c: f1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4B:CF:B4:5A:76:86:D0:57:45:39:58:50:AC:B8:90:20:DE:23:B6 X509v3 Authority Key Identifier: keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a1:f5:bc:2b:8e:8d:98:37:92:60:2e:a1:f6:4e:e6:28:4e: 6e:09:70:97:fe:46:72:e0:7d:91:f6:b3:5f:06:02:81:d7:52: 58:bb:72:da:07:67:45:05:9e:56:7b:4a:38:19:a2:2f:4a:74: 0d:64:67:20:7d:9a:17:28:a8:5d:87:fc:c0:29:f3:2e:a3:49: 8c:22:86:98:30:b7:53:40:71:76:73:4f:b2:42:e7:b1:0c:18: 2f:71:82:7d:e1:de:d6:f1:de:86:8e:00:1c:62:00:1f:7f:d0: be:dc:3e:1c:90:c5:35:80:4c:9c:19:e7:c8:7a:82:7a:c8:23: da:84:88:57:3c:d2:c3:ca:90:ba:5d:c7:46:c8:da:c3:9b:f7: 8c:46:71:76:3b:df:af:b0:a9:18:36:40:fe:40:30:41:d9:17: 85:d9:91:10:c9:07:4e:6f:0c:f7:47:c4:7d:3c:42:74:05:93: 55:f2:0b:3b:25:53:6a:43:7b:27:32:63:0e:8b:93:e5:8f:b2: d0:8d:e9:d0:b6:ee:1c:23:df:80:de:c2:a5:cc:3b:a5:14:19: a7:be:87:d1:4a:61:73:32:1d:1b:f5:9b:53:e8:c5:7a:e0:95: 7c:dc:00:56:62:e4:55:f8:8c:ff:32:d6:62:f6:1c:4a:ca:7e: c0:16:26:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SGhPfFzNXeo0rd+pAZ5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1 YWM5MzAwHhcNMjUxMjIxMDUwMTA4WhcNMjUxMjIyMDUwMTA4WjAzMTEwLwYDVQQD EyhlZDRiY2ZiNDVhNzY4NmQwNTc0NTM5NTg1MGFjYjg5MDIwZGUyM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrCM7bw7popatTxyCDZgpmkPX3/j /rd41sfekeFEVVuA8VSVEMEYARe44G+Jyp0HkT2oyIyy9TuHBmEcsU9z2g40j8qs etlRNuLLPrpwrdW3akBkcwLKd/TT9UTiwy2U8GwiAjyg8PydhprTCvenI7d3cKb3 ihduHQGBGY0NqmcArbnnvj4BX9HmooGgJIkT3wCTXb8dyf9K78PbgbX8hGoBBO9v W0h53fPRcUVbmNHiPBKjtlk7K9DDyu1O+llHONLNqw/icj3zMQC7JKieUIkqf6SE OTCDtmR31okVONQK8diEFny5n2YVYbYIM8IVU+vsYGWq0f2tZ6VnUTzxmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1Lz7RadobQV0U5WFCsuJAg3iO2MB8GA1UdIwQY MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKH1vCuO jZg3kmAuofZO5ihObglwl/5GcuB9kfazXwYCgddSWLty2gdnRQWeVntKOBmiL0p0 DWRnIH2aFyioXYf8wCnzLqNJjCKGmDC3U0BxdnNPskLnsQwYL3GCfeHe1vHeho4A HGIAH3/Qvtw+HJDFNYBMnBnnyHqCesgj2oSIVzzSw8qQul3HRsjaw5v3jEZxdjvf r7CpGDZA/kAwQdkXhdmREMkHTm8M90fEfTxCdAWTVfILOyVTakN7JzJjDouT5Y+y 0I3p0LbuHCPfgN7Cpcw7pRQZp76H0UphczIdG/WbU+jFeuCVfNwAVmLkVfiM/zLW YvYcSsp+wBYmlw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:35:05 2025 by rpki-client